CVE-2026-72309 tracing/remotes: Fix leak in trace_remote_alloc_buffer() error path

In the Linux kernel, the following vulnerability has been resolved: tracing/remotes: Fix leak in traceremoteallocbuffer error path If page allocation fails in traceremoteallocbuffer, desc-nrcpus is not yet incremented for the current CPU. As a consequence, on error, half-allocated rbdesc will not...

CVE-2026-72281

The CVE-2026-72281 entry concerns the Linux kernel KVM arm64/pKVM reclaim against the VM memory manager. The issue arose because protected guest faults could pin long-term resources to the VM’s mm (memory descriptor), and teardown could execute later from file release with current->mm potentia...

CVE-2026-72281 KVM: arm64: account pKVM reclaim against the VM mm

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: account pKVM reclaim against the VM mm Protected guest faults charge long term pins to the VM's mm. Teardown can run later from file release, where current-mm may be unrelated. Drop the charge from kvm-mm instead...

CVE-2026-72266

The CVE-2026-72266 entry concerns a memory-leak in the Linux kernel’s vesafb path under fbdev. The root cause is that a string returned by fb_get_options() was not freed by vesafb_probe() after setup, despite an earlier change that the caller should free the string. The issue has been resolved by...

EUVD-2026-59158

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Release reserved memory on cleanup The MT8192 AFE probe calls ofreservedmemdeviceinit and falls back to preallocated buffers when no reserved memory region is available. When the reserved memory assignment...

CVE-2026-72258 ASoC: mediatek: mt8183: Release reserved memory on cleanup

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8183: Release reserved memory on cleanup The MT8183 AFE probe can assign reserved memory with ofreservedmemdeviceinit, but the assignment is never released on driver removal or later probe failures. Register a...

CVE-2026-72244 gpu/buddy: bail out of try_harder when alignment cannot be honoured

In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of tryharder when alignment cannot be honoured The tryharder contiguous fallback could return a range whose start offset did not match the caller's minblocksize. When a candidate's start is misaligned, realign...

CVE-2026-72214 power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak

In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix missing nvmemdeviceput causing reference leak In cpcapbatterydetectbatterytype, the reference to an nvmem device obtained via nvmemdevicefind is not released with nvmemdeviceput on the success or...

CVE-2026-72213 mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch In allochugetlbfolio, a single hcg pointer is used for both the rsvd and non-rsvd hugetlb cgroup charges. When mapchg is set, hugetlbcgroupchargecgrouprsvd stores the...

CVE-2026-72213 mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch In allochugetlbfolio, a single hcg pointer is used for both the rsvd and non-rsvd hugetlb cgroup charges. When mapchg is set, hugetlbcgroupchargecgrouprsvd stores the...

CVE-2026-72178

CVE-2026-72178 relates to the Linux kernel, specifically the DAMON subsystem (mm/damon/core). The issue: during damon_commit_target(), destination and source target pids are not consistently managed when a commit fails, which could leak pids if the destination context lacks the necessary cleanup ...

CVE-2026-72178 mm/damon/core: always put unsuccessfully committed target pids

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: always put unsuccessfully committed target pids damoncommittarget puts and gets the destination and the source target pids. It puts the destination target pid because it will be overwritten by the source target pid...

EUVD-2026-58936

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: always put unsuccessfully committed target pids damoncommittarget puts and gets the destination and the source target pids. It puts the destination target pid because it will be overwritten by the source target pid...

EUVD-2026-58933

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: fix makeuffdwphugepte prot-update race Patch series "userfaultfd/pagemap: pre-existing fixes". These are pre-existing bug fixes that were carried at the front of the userfaultfd RWP working-set-tracking series up...

CVE-2026-72175 fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: fix makeuffdwphugepte prot-update race Patch series "userfaultfd/pagemap: pre-existing fixes". These are pre-existing bug fixes that were carried at the front of the userfaultfd RWP working-set-tracking series up...

CVE-2026-72175

CVE-2026-72175修复针对 Linux 内核 fs/proc/task_mmu 中的 make_uffd_wp_huge_pte() 的 prot-update race。六项变更来自 patch series “userfaultfd/pagemap: pre-existing fixes”，用于 present 的 HugeTLB PTE 上状态更新时的时序竞态：在未调用对应的 ptep_modify_prot_start() 的情况下就执行 ptep_modify_prot_commit()，可能导致写入了过时的快照。修复通过对 present-PTE 分支采用与非 hu...

CVE-2026-72173 fs/proc/task_mmu: do not warn on seeing non-migration pmd entry

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: do not warn on seeing non-migration pmd entry Patch series "mm/hmm: A fix and a selftest", v3. Patch 1 fixes a stale warning present from the time when only migration softleaf entries were supported at the PMD...

CVE-2026-72173 fs/proc/task_mmu: do not warn on seeing non-migration pmd entry

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: do not warn on seeing non-migration pmd entry Patch series "mm/hmm: A fix and a selftest", v3. Patch 1 fixes a stale warning present from the time when only migration softleaf entries were supported at the PMD...

CVE-2026-72171 mtd: slram: remove failed entries from the device list

In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device list registerdevice links a new slrammtdlist entry before allocating all of the state needed by the entry. If a later allocation, memremap, or mtddeviceregister fails, the partial...

CVE-2026-72169

The CVE-2026-72169 entry concerns the Linux kernel. A vulnerability arose from not always aligning scratch sizes to CMA_MIN_ALIGNMENT_BYTES when using scratch_scale, potentially causing a released pageblock to be only partially scratch. The fix, as documented, is to perform the rounding up for bo...